Avast WEBforum
Business Products => Archive (Legacy) => Avast Business => Avast Server Protection => Topic started by: mypewter on August 18, 2008, 11:04:54 PM
-
Howdee
2 questions:
1] yesterday on bootup - I noticed an icon that says
Critical update Software removal tool
I clicked and saw just a box with identity like microsoft ID or Avast
so I clicked remind me later
It disappears after that~ [but comes back on reboot]
Did a google search and it appears something like this was
going on in 2007 only it was titled a little differently
Went to a geek site and was told that it was malware and
would have to follow a gazillion steps to get rid of it.
So did a full avast scan and it comes up NO virus found
2] If this is a type of malware, why didn't Avast catch and remove this?
What can I do to get rid of it if it is not a legitimate update of any sort?
[also - I changed internet servers a few mo/ago so have a new
email address- Do I need to update this in my Avast service profile?]
I am betwixed about this doing harm to my PC :'(
Help please??
Thanks ;D
-
It's not easy to guess. What I can say is that you can run (few, not gazillions) steps to be sure you're clean:
1. Disable System Restore and then reenable it again.
2. Clean your temporary files.
3. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! (http://www.freedrweb.com/cureit/) instead.
4. Use SUPERantispyware (http://www.superantispyware.com), MBAM (http://malwarebytes.org/mbam.php) or Spyware Terminator (http://www.spywareterminator.com/) to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
5. Test your machine with anti-rootkit applications (http://www.antirootkit.com/software/index.htm). I suggest avast! antirootkit (http://files.avast.com/files/beta/aswar.exe) or Trend Micro RootkitBuster (http://www.trendmicro.com/download/rbuster.asp).
6. Make a HijackThis (http://www.bleepingcomputer.com/files/hijackthis.php) log to post here or, better, submit the RunScanner (http://www.runscanner.net/) log to to on-line analysis.
7. Immunize your system with SpywareBlaster (http://www.javacoolsoftware.com/spywareblaster.html) or Windows Advanced Care (http://www.iobit.com/AdvancedWindowsCarePersonal/index.html).
8. Check if you have insecure applications with Secunia Software Inspector (http://secunia.com/software_inspector/).
-
A screenshot might help.
-
Sorry
My session logged out - after login -I thought I was replying so accidently a new thread was started :o
My reply is in the new thread Critical update
-
Just noticed that all your suggestions are "linked" ;D
so nice of you....
When I pasted your reply they didn't show up
Please excuse -
I'm just above a doorknob in PC maintenance
but I manage to see through a few keyholes : :P
Is there a way to use just the original thread ??
-
A screenshot might help.
You mean after I get log results?
[not sure how to do a screenshot] :-[
-
[not sure how to do a screenshot] :-[
See how: http://forum.avast.com/index.php?topic=8982.0.
You can use Gadwin PrintScreen to get a screenshot (http://www.gadwin.com/printscreen/) or the free version of WinSnap 1.1.10 (http://www.filehippo.com/download_winsnap/?2173).
-
A screenshot might help.
You mean after I get log results?
[not sure how to do a screenshot] :-[
The screenshot is of the icon (if you can catch it) we might recognise what it is.
-
Gotcha DavidR
Thing is - Tech said I should go to virus/worms on avast4 board
I thought I was on the avast4 board~
avast!WEBforum > avast! support forums > avast! 4 Server Edition >
Oh well - you guys are neat and thanks.
I will take this basket of tips and go work on some of this
and be back later if the icon persists and if I get a screenshot
Love my PC but it drives me nuts with all the
bad guys out there trying to ruin it ......... >:(
-
Yes that is probably best, though since we are contributing on this topic we get notified of new content. Perhaps one of the Moderators will move it to the correct forum.